I see. Sadly the documentation has not been updated yet. It needs to be:
discovery.ec2.access_keydiscovery.ec2.secret_key
cloud.aws.region should not be used anymore but discovery.ec2.endpoint needs to be set in elasticsearch.yml file.
I hope this helps.
cc @rjernst in case I'm saying something wrong 